Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47d8cfd7-a902-4c9a-86f2-46fb23a3f6cd.roa
File:                     47d8cfd7-a902-4c9a-86f2-46fb23a3f6cd.roa (raw, json)
Hash identifier:          jFo5dfgzUVYRu4XI5LV/Spx1+fVTvyxXMwNOPTgCBws=
Subject key identifier:   34:CD:19:75:1C:D5:43:7F:70:76:E5:BE:47:83:EE:9C:07:30:67:07
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B8518F6A6D6BB32937EA669B8660C2FB2A0984A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47d8cfd7-a902-4c9a-86f2-46fb23a3f6cd.roa
Signing time:             Thu 03 Oct 2024 00:00:00 +0000
ROA not before:           Thu 03 Oct 2024 00:00:00 +0000
ROA not after:            Thu 07 Nov 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        5.60.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:85:18:f6:a6:d6:bb:32:93:7e:a6:69:b8:66:0c:2f:b2:a0:98:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 00:00:00 2024 GMT
            Not After : Nov  7 23:59:59 2024 GMT
        Subject: serialNumber=7edf49164dd21f102e4e412b09aff1cb7242d0321b271d189ce3b5f5aa05529e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:08:4e:4f:f1:ac:ce:8f:df:ac:0a:75:e3:
                    2b:7b:67:9f:3b:e8:46:af:59:2e:17:5c:5a:1d:42:
                    8b:9f:a1:c4:6a:d8:db:7c:7f:d5:c9:e7:bf:3a:97:
                    10:42:c6:98:ef:08:d5:84:c4:f5:86:2c:a0:b7:bb:
                    98:77:61:40:ee:9a:26:90:a9:74:18:72:da:14:63:
                    d4:61:15:c6:46:5a:b2:4c:29:2b:e9:f7:55:2c:7a:
                    44:25:32:a8:44:5e:c4:0f:d8:e3:d7:f2:77:cf:67:
                    0a:06:aa:01:8c:00:0f:6d:02:c4:f8:bb:be:be:dd:
                    61:bb:d4:4b:f6:f7:66:b6:33:44:e2:4f:73:11:cb:
                    fd:c3:f3:bf:a1:ef:88:92:bc:f4:06:45:76:b9:90:
                    63:b6:cf:84:b7:71:ce:ca:af:9c:ef:fa:fb:03:43:
                    40:e0:b8:32:07:03:63:0f:a9:b6:7c:2e:d9:ca:f0:
                    57:26:f8:8e:e8:14:87:f9:19:56:67:28:80:21:9f:
                    41:87:ef:6f:0e:3e:65:08:90:dd:28:bd:7d:e5:4b:
                    6e:0e:f4:5f:fb:b5:3d:68:c6:a5:f2:5e:82:07:d6:
                    e7:32:f5:0b:88:ee:5a:00:8e:b1:77:b7:63:3f:5d:
                    f8:ed:7c:18:df:aa:92:c0:e9:60:bd:dd:7f:39:46:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CD:19:75:1C:D5:43:7F:70:76:E5:BE:47:83:EE:9C:07:30:67:07
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47d8cfd7-a902-4c9a-86f2-46fb23a3f6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.60.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:35:2e:d5:1c:86:fd:65:1b:ea:0c:c5:89:b2:92:28:e9:e8:
         54:c9:04:56:82:ba:39:a6:a5:f5:03:31:8c:53:b2:f2:22:aa:
         2a:b5:1b:0e:77:85:f3:c0:ac:7d:ca:d1:1a:6b:95:3f:04:8d:
         4c:77:2a:48:80:b6:e3:a9:25:c9:52:16:d2:7a:9c:39:da:7c:
         a1:3b:a0:24:6d:5c:90:c8:93:e3:b7:93:8e:c5:6f:99:b6:13:
         c6:6b:4b:72:ce:88:20:1c:75:21:bf:1f:4e:ae:e7:ad:f1:5a:
         f8:46:bc:c0:47:c2:4c:ae:56:f5:a4:17:3d:18:a3:f8:c2:fd:
         2b:90:d7:a1:0b:83:b8:83:8e:17:f9:9c:db:d1:5c:cf:67:59:
         53:43:be:8c:d3:91:fc:7b:90:5c:cc:a3:f7:45:2a:a6:2f:4c:
         07:b3:a6:0d:76:df:3a:1b:0a:39:06:da:38:23:68:99:3a:7f:
         8a:0d:f7:90:31:2d:e7:bd:63:d8:d7:6b:50:c8:3f:b7:89:6b:
         73:60:0e:86:9f:4f:27:26:4e:0a:79:f8:46:a4:8c:29:6c:70:
         05:59:0d:c6:3c:cd:ee:1a:25:65:86:ad:e0:4d:79:eb:e7:3d:
         85:58:2d:6d:e6:11:24:f1:83:91:35:c5:33:7b:b3:80:22:0d:
         0b:0b:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 01:37:48 2024 by rpki-client on console-ams.rpki-client.org